What is the recommended practice when ...

单项选择题What is the recommended practice when considering VPN termination and firewall placement?（）

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall, with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall, with the VPN terminating outside the firewall

点击查看答案

您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题An organization hires a contractor who only needs access to email and a group calendar. They do not need administrator access to the computer. Which VPN model is the most appropriate?（）

A. Thin Model
B. Thick Client
C. Port Forwarding
D. Clientless Access
E. Layer 3 Network Access

点击查看答案

2.单项选择题In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?（）

A. Layer 2
B. Layer 3
C. in-band
D. out-of-band
E. edge
F. central

点击查看答案

3.单项选择题Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?（）

A. NAC can authenticate using 802.1X and IBNS cannot
B. NAC can ensure only compliant machines connect and IBNS cannot
C. NAC can ensure access to the correct network resources and IBNS cannot
D. NAC can manage user mobility and reduce overhead costs and IBNS cannot

点击查看答案

4.多项选择题Which three of these are important when determining NAS Server scaling? （）

A. interface bandwidth
B. rescan timer interval
C. total number of network devices
D. number of new user authentications per second
E. which operating system is loaded on the client
F. number of checks performed in a posture assessment.

点击查看答案

5.单项选择题Which of these is true of a Layer 3 out-of-band NAS deployment?（）

A. The NAS acts as a gateway for all Layer 3 traffic.
B. Only the MAC address is used to identify the client device.
C. User traffic remains on the same VLAN for the duration of the connection.
D. After authentication and posture assessment, client traffic no longer passes through the NAS.

点击查看答案

6.单项选择题One of your customers wishes to use the NAS to perform DHCP functions and does not currently have a Layer 3 gateway in its production network. Which gateway mode is appropriate for this customer?（）

A.Virtual Gateway
B.Real-IP Gateway
C.NAT Gateway
D.IP-IP Gateway

点击查看答案

7.单项选择题One of your customers has deployed a Layer 3 gateway in the untrusted network. Which gateway mode is appropriate for this customer?（）

A.Virtual Gateway
B.Real-IP Gateway
C.NAT Gateway
D.Central Gateway

点击查看答案

8.单项选择题During consultation, you find that a customer has only a single asset closet and is looking for a solution that is easy to deploy. Which NAS physical deployment model would you suggest to this customer?（）

A.edge
B.central
C.Layer2
D.Layer3

点击查看答案

9.多项选择题The Cisco NAC Appliance is able to check which three items before allowing network access?（）

A.client antivirus software state
B.personal firewall settings
C.wireless cell bandwidth availability
D.IOS versions for routers and switches
E.appropriate client patch management level
F.appropriate QoS settings for client application Answer:

点击查看答案

10.单项选择题During consultation, you find that a customer has multiple asset closets and will be adding more in the future. Which NAS physical deployment model would you suggest to this customer?（）

A.edge
B.central
C.Layer2
D.Layer3

点击查看答案